Partner Product

FireFly IP Packet-filtering firewall  (617)
FireFly offers a rules-based dynamic packet-filtering firewall which also supports stateful inspection of packets. It is designed specifically for use in embedded devices. Its core engine permits or denies packets from passing through it based on pre-defined and easily configurable policies. FireFly is a member of the TeamF1 Internet Software Extensions for Classification and Traffic Shaping (INSECTS) suite.

FireFly is a robust, lean, high performance, packet-filtering firewall implementation that secures access to and from networked embedded devices. Its core engine permits or denies packets from passing through it based on pre-defined and easily configurable policies. Its unique, advanced features include hooks for dynamic firewalling and stateful inspection. Its small footprint and robustness have been specifically designed for use in an embedded environment. FireFly offers unprecedented flexibility and easy customization make it the firewall of choice in embedded networking applications.



Stateful inspection is an enhancement over static and dynamic inspection and provides the ability to track and control the flow of communication passing through the firewall filter. This offers the ability to keep track of state and context information about a session and simplifies rules and tries to interpret higher-level protocols such as NFS and RPC. FireFly provides stateful inspection for TCP/UDP/ICMP packets and further enables custom versions of circuit-level filtering and application-level filtering to be easily added with the hooks provided.



FireFly supports a customizable management interface that can be programmatically controlled or presented through a string-based command layer, which can be easily controlled through a web-server, with structured data files such as XML, or via a command line interface (CLI). Support for rule numbering provides ease of overriding at any level. Customizable hooks for logging and forwarding enable specific actions to be taken when accepting or rejecting packets.



Securing a connected embedded device requires security in different dimensions. FireFly system security features include keeping an embedded device protected from external access on specific ports. This perimeter or system security acts as a powerful complement to network security which protects data in transit, when it is used with security solutions such as SSL, SSH and IPsec solutions by TeamF1. For example, a combination of SSHield SSH tunneling and FireFly restricted external access enables sophisticated security policy settings by allowing only a single or few secure points of entrance through the network to the embedded device.



FireFly is available with optimized editions for both the latest, and older but still popular, versions of VxWorks and embedded Linux. Special attention to optimization includes support for the native network driver model, and enhanced memory management. It has been extensively validated on a variety of CPU architectures to minimize development and integration efforts. FireFly for VxWorks 5.x, 6.x, AE, and platforms such as Network Equipment (PNE), Consumer Devices (PCD) and Industrial Devices (PID) bundles, include optimized support for multi-tasking and memory partitions. FireFly for embedded Linux has been optimized for multi-processing and memory management on the 2.4 and 2.6 kernel variants. It transparently works with a wide selection of stacks including: those bundled with VxWorks, Linux, or NetF1 the high performance stack by TeamF1. Like the other members of the INSECTS suite, it is built as a network service that binds itself with the MUX layer, thereby guaranteeing compatibility with any embedded application with minimal to no changes, and without any special network stack source code requirement.

617
<P>Features:</P> <UL> <LI>Fully configurable anti-spoofing IP packet filtering <LI>Extremely small footprint <LI>Low network latency <LI>Dynamic firewall support in conjunction with NAT <LI>Forwarding and logging hooks <LI>Built-in stateful inspection support for TCP, UDP and ICMP <LI>Easily controlled by webserver through string based CLI <LI>Includes rule numbering support and advanced "or" blocks in rules <LI>Support for rule "sets" <LI>Support for CPU types of either endian-ness including PowerPC,MIPS, X86, ARM/XScale <LI>Royalty-free full source distribution for VxWorks and Linux! </LI></UL> <P>Filtering Support:</P> <UL> <LI>Source and destination IP addresses and MAC types <LI>Source and destination port numbers <LI>IP/TCP/UDP/ICMP Protocol based filtering <LI>TCP window and flags such as FIN, SYN, RST, PUSH, ACK and URG <LI>All ICMP types <LI>IP options such as strict source route, loose source route, record route, version, TTL, and time stamp <LI>Fragment flag, service type (TOS), IP ID and IP precedence in the IP header <LI>MAC address, MAC type </LI></UL> <P>Also available: </P> <UL> <LI>SSLimSecure SSL: Secure Socket Layer &amp; TLS <LI>ClassHopper: Alternate Queuing Disciplines <LI>SSHield SSH: Secure Shell &amp; SFTP/SCP <LI>V-IPSecure IPSec &amp; IKE: Network Layer Security </LI></UL>
FireFly IP Packet-filtering firewall
FireFly is a robust, lean, high performance, packet-filtering firewall implementation that secures access to and from networked embedded devices. Its core engine permits or denies packets from passing through it based on pre-defined and easily configurable policies. Its unique, advanced features include hooks for dynamic firewalling and stateful inspection. Its small footprint and robustness have been specifically designed for use in an embedded environment. FireFly offers unprecedented flexibility and easy customization make it the firewall of choice in embedded networking applications. Stateful inspection is an enhancement over static and dynamic inspection and provides the ability to track and control the flow of communication passing through the firewall filter. This offers the ability to keep track of state and context information about a session and simplifies rules and tries to interpret higher-level protocols such as NFS and RPC. FireFly provides stateful inspection for TCP/UDP/ICMP packets and further enables custom versions of circuit-level filtering and application-level filtering to be easily added with the hooks provided. FireFly supports a customizable management interface that can be programmatically controlled or presented through a string-based command layer, which can be easily controlled through a web-server, with structured data files such as XML, or via a command line interface (CLI). Support for rule numbering provides ease of overriding at any level. Customizable hooks for logging and forwarding enable specific actions to be taken when accepting or rejecting packets. Securing a connected embedded device requires security in different dimensions. FireFly system security features include keeping an embedded device protected from external access on specific ports. This perimeter or system security acts as a powerful complement to network security which protects data in transit, when it is used with security solutions such as SSL, SSH and IPsec solutions by TeamF1. For example, a combination of SSHield SSH tunneling and FireFly restricted external access enables sophisticated security policy settings by allowing only a single or few secure points of entrance through the network to the embedded device. FireFly is available with optimized editions for both the latest, and older but still popular, versions of VxWorks and embedded Linux. Special attention to optimization includes support for the native network driver model, and enhanced memory management. It has been extensively validated on a variety of CPU architectures to minimize development and integration efforts. FireFly for VxWorks 5.x, 6.x, AE, and platforms such as Network Equipment (PNE), Consumer Devices (PCD) and Industrial Devices (PID) bundles, include optimized support for multi-tasking and memory partitions. FireFly for embedded Linux has been optimized for multi-processing and memory management on the 2.4 and 2.6 kernel variants. It transparently works with a wide selection of stacks including: those bundled with VxWorks, Linux, or NetF1 the high performance stack by TeamF1. Like the other members of the INSECTS suite, it is built as a network service that binds itself with the MUX layer, thereby guaranteeing compatibility with any embedded application with minimal to no changes, and without any special network stack source code requirement.
NO
software
FireFly offers a rules-based dynamic packet-filtering firewall which also supports stateful inspection of packets. It is designed specifically for use in embedded devices. Its core engine permits or denies packets from passing through it based on pre-defined and easily configurable policies. FireFly is a member of the TeamF1 Internet Software Extensions for Classification and Traffic Shaping (INSECTS) suite.